• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 734
  • Last Modified:

ISA 2006 Publish Webserver - first access very slow

Hello,

I published a single Web-Server behind a ISA 2006 with a Web Server Publishing Rule.
When I try to access this site from external, it takes up to 15 seconds until the site displays.
But only the first access !! When I close my browser (even with clearing the history and cache) and open it again the site display within a second. Then I Close my browser and open it again after 15 to 30 minutes and the delay is again 10 to 15 seconds.

I deactivate the rule and create a new rule as Server publishing rule with only forward port 80 to my Webserver. That works great and without delays.

How can I troubleshoot this delay?

Thanks to all
0
Trinity99
Asked:
Trinity99
  • 3
  • 3
1 Solution
 
Keith AlabasterCommented:
How are you using DNS on the ISA box? the ISA should only use the internal DNS server adresses with no reference to external dns Ip addresses
0
 
Trinity99Author Commented:
We are using only internal DNS (Active Directory integrated) which resolve external addresses.

It seems that when the site is first accessed from an external source the ISA make some checks on the request and after some time the request is forwarded.
0
 
Keith AlabasterCommented:
can you post the output of an ipconfig /all from the ISA box?
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
Trinity99Author Commented:


Windows-IP-Konfiguration



   Hostname  . . . . . . . . . . . . : ITS01001

   Primäres DNS-Suffix . . . . . . . : groupsites.corp

   Knotentyp . . . . . . . . . . . . : Unbekannt

   IP-Routing aktiviert  . . . . . . : Ja

   WINS-Proxy aktiviert  . . . . . . : Ja

   DNS-Suffixsuchliste . . . . . . . : groupsites.corp



PPP-Adapter RAS-Server-(Einwähl-)Schnittstelle:



   Verbindungsspezifisches DNS-Suffix:

   Beschreibung  . . . . . . . . . . : WAN (PPP/SLIP) Interface

   Physikalische Adresse . . . . . . : 00-53-45-00-00-00

   DHCP aktiviert  . . . . . . . . . : Nein

   IP-Adresse. . . . . . . . . . . . : 169.254.203.47

   Subnetzmaske  . . . . . . . . . . : 255.255.255.255

   Standardgateway . . . . . . . . . :



Ethernet-Adapter (Extern)_vLan1099_SchuWa:



   Verbindungsspezifisches DNS-Suffix:

   Beschreibung  . . . . . . . . . . : Intel(R) PRO/1000 MT-Netzwerkverbindung #3

   Physikalische Adresse . . . . . . : 00-0C-29-27-A8-A0

   DHCP aktiviert  . . . . . . . . . : Nein

   IP-Adresse. . . . . . . . . . . . : 91.190.202.3

   Subnetzmaske  . . . . . . . . . . : 255.255.255.248

   Standardgateway . . . . . . . . . : 91.190.202.1

   NetBIOS über TCP/IP . . . . . . . : Deaktiviert



Ethernet-Adapter (Intern)_vLAN-Int0101_SchuWa:



   Verbindungsspezifisches DNS-Suffix:

   Beschreibung  . . . . . . . . . . : Intel(R) PRO/1000 MT-Netzwerkverbindung #4

   Physikalische Adresse . . . . . . : 00-0C-29-27-A8-AA

   DHCP aktiviert  . . . . . . . . . : Nein

   IP-Adresse. . . . . . . . . . . . : 192.168.175.1

   Subnetzmaske  . . . . . . . . . . : 255.255.255.0

   Standardgateway . . . . . . . . . :

   DNS-Server  . . . . . . . . . . . : 192.168.175.20



Ethernet-Adapter (DMZ1)_vLAN-Int0102_Schuwa:



   Verbindungsspezifisches DNS-Suffix:

   Beschreibung  . . . . . . . . . . : VMware Accelerated AMD PCNet Adapter #2

   Physikalische Adresse . . . . . . : 00-0C-29-27-A8-BE

   DHCP aktiviert  . . . . . . . . . : Nein

   IP-Adresse. . . . . . . . . . . . : 192.168.176.1

   Subnetzmaske  . . . . . . . . . . : 255.255.255.0

   Standardgateway . . . . . . . . . :



Ethernet-Adapter (Mangement)_vLAN780_SchuWa-Mgmt:



   Verbindungsspezifisches DNS-Suffix:

   Beschreibung  . . . . . . . . . . : VMware Accelerated AMD PCNet Adapter

   Physikalische Adresse . . . . . . : 00-0C-29-27-A8-B4

   DHCP aktiviert  . . . . . . . . . : Nein

   IP-Adresse. . . . . . . . . . . . : 10.252.175.3

   Subnetzmaske  . . . . . . . . . . : 255.255.255.248

   Standardgateway . . . . . . . . . :



PPP-Adapter ISAVPNSchuwaNBG:



   Verbindungsspezifisches DNS-Suffix:

   Beschreibung  . . . . . . . . . . : WAN (PPP/SLIP) Interface

   Physikalische Adresse . . . . . . : 00-53-45-00-00-00

   DHCP aktiviert  . . . . . . . . . : Nein

   IP-Adresse. . . . . . . . . . . . : 172.16.90.19

   Subnetzmaske  . . . . . . . . . . : 255.255.255.255

   Standardgateway . . . . . . . . . :

   DNS-Server  . . . . . . . . . . . : 172.16.10.2

                                       172.16.10.1

   NetBIOS über TCP/IP . . . . . . . : Deaktiviert

0
 
Keith AlabasterCommented:
That looks fine - do you have all of the ISA updates/service packs installed (Supportability update, SP1 etc)? Without them, ISA is not supported in a virtual environment. It should still work but it is not a supported configuration.

open the ISA gui, select monitoring - logging. Start query.

What do get in the log when using the web publishing rule? The main reasons why you 'normally' see the results that you report is when ISA is not able to resolve the box (the FQDN representing the box) being published. for example, when you use a server publishing rule, the traffic is simply forwarded to the internal IP addresses of the box being published. When you use the web publishing rule, it uses the fqdn - have you also added the internal IP address of the web server in the web publishing rule?
0
 
Trinity99Author Commented:
Seems that i have found my problem, but i don´t know why, because name resolution from ISA works fine and resolves the correct IP-Address.

Look at the screen shots attached.

Thank you.
bad.jpg
good.jpg
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now